Unscored severity · published Jul 26, 2007
CVE-2007-4023
Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
Mobility Controller · Aruba
through 2.4.8.6-fips; through 2.5.4.18 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4023
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4023
osvdb.org
http://osvdb.org/36469
Patch
http://secunia.com/advisories/26192
www.arubanetworks.com
http://www.arubanetworks.com/support/alerts/aid-070907b.asc
US Government Resource
http://www.kb.cert.org/vuls/id/680449
www.securityfocus.com
http://www.securityfocus.com/bid/25059
www.securitytracker.com
http://www.securitytracker.com/id?1018457
More from Mobility Controller
–
CVE-2007-0931
Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 allows…
–
CVE-2007-0932
The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege…